Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/W9G-lqUstz4178ebWDsOK3KSr_g.roa
File: W9G-lqUstz4178ebWDsOK3KSr_g.roa (raw, json)
Hash identifier: vWAYS6xfEHE6P3/KIkEsi47fw+LYKcn4DwkTv2U2Hm8=
Subject key identifier: 5B:D1:BE:96:A5:2C:B7:3E:35:EF:C7:9B:58:3B:0E:2B:72:92:AF:F8
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04111EC4
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/W9G-lqUstz4178ebWDsOK3KSr_g.roa
Signing time: Fri 11 Feb 2022 02:20:59 +0000
ROA not before: Fri 11 Feb 2022 02:20:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68230852 (0x4111ec4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 11 02:20:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bd1be96a52cb73e35efc79b583b0e2b7292aff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:39:e1:f5:6d:78:29:51:05:ba:1d:3b:2e:
02:05:2a:30:95:02:0d:d8:f5:5a:94:3a:66:60:4d:
91:9f:cc:1a:34:02:52:06:35:56:c3:b9:b2:0e:25:
d3:1f:1a:53:d1:6f:be:60:68:a9:f2:28:de:98:f4:
76:0e:87:ea:d6:35:4b:cb:23:e4:b6:be:a6:d9:6d:
13:b1:df:33:af:ac:8b:89:c2:fd:0d:c8:92:60:ac:
3b:bd:c4:df:80:e4:32:43:b8:2d:fa:60:07:cd:40:
2f:be:53:b9:2d:3e:5d:7c:dc:b4:5f:29:10:dd:a3:
13:46:f1:89:d9:e5:08:4d:1e:9b:7b:69:77:70:f2:
6a:8a:9e:7c:a7:3d:37:e7:37:f8:9e:60:a2:97:5c:
ef:46:e5:75:0b:c2:a5:56:94:27:c2:24:a1:0d:c6:
f2:50:4b:f0:3c:0b:55:ab:72:79:62:57:72:56:6b:
06:9e:6a:bf:32:a3:ff:98:75:6d:94:9a:ee:72:65:
34:dd:1b:4c:0c:5f:a9:40:57:cb:f3:13:4a:3a:16:
2b:54:8c:ea:d4:3c:02:56:43:4d:38:80:f7:85:99:
a4:a7:0a:fc:00:5e:06:01:07:60:bb:57:97:dc:47:
bd:99:79:7c:e8:11:c3:df:86:6e:ff:44:ad:e1:2d:
8d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D1:BE:96:A5:2C:B7:3E:35:EF:C7:9B:58:3B:0E:2B:72:92:AF:F8
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/W9G-lqUstz4178ebWDsOK3KSr_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
57:08:2f:2e:f1:7e:7c:6f:55:02:ff:10:c5:d0:60:a8:2c:77:
1c:f2:86:fa:ab:e0:aa:9a:28:af:df:87:9b:4a:dc:bc:43:12:
46:e8:29:04:40:74:c5:61:9f:85:39:82:a5:83:27:d6:f1:19:
fe:2a:4f:b6:ca:ff:7e:b2:2d:a2:3a:6e:fb:88:15:a7:5c:fb:
57:b2:22:d5:9d:70:8c:2d:9c:f3:00:d7:5e:cb:dd:64:de:ff:
88:9c:d6:b8:45:6e:f3:f3:9b:5e:7b:bf:e4:59:7f:87:3b:48:
69:59:5c:95:02:90:df:c2:ac:b0:38:b6:53:f2:de:52:3c:f2:
f4:37:9c:12:af:56:d2:34:ad:ae:82:84:54:f9:8e:b7:9e:e0:
ff:db:f1:57:dc:38:4c:1c:7a:4e:e5:dc:44:de:dc:f2:b1:7f:
1c:68:b3:02:26:76:5a:9b:3c:03:5e:0d:64:85:db:a0:fb:05:
3e:a2:c3:a1:b6:f3:d6:39:83:37:8d:95:98:19:9b:df:82:1b:
b5:12:8b:0c:93:af:42:ba:40:b0:e7:b2:63:b1:81:da:a0:92:
26:af:fc:97:ae:3c:ab:64:d5:9f:98:41:c6:2e:20:79:5e:45:
91:33:e7:a6:ff:d7:a1:4e:8e:68:f6:09:85:9e:e9:10:6b:dc:
5e:17:eb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:54 2024 by rpki-client on console-ams.rpki-client.org